Jump to content

Recent DDoS


Recommended Posts

You may have noticed some downtime off and on over the last few weeks. Someone on Tommy has been getting targeted by some intermittent DDoS attacks. Due to the nature of the attack it's not possible to tell which of the about 2000 websites on Tommy is being attacked. These attacks have caused short downtimes for Ricky, all of our VPS, our main website, and forum as well, until the DDoS protection kicks in and takes the targeted IP offline.

We've been moving accounts around between different IP addresses to help narrow down who is being targeted, and mitigate the downtime for domains that are being attacked. If you use HelioHost's nameservers, ns1.heliohost.org and ns2.heliohost.org, your A record will be automatically updated to follow the move, but if you use Cloudflare or some other external DNS we have no way of updating it for you so your website will show the Plesk default page until you update the IP manually or your account gets moved back to the original IP that it was on. If your website is currently showing the Plesk default page please let us know so we can get it fixed as soon as possible.

Our ISP has been working with us to help keep everything online, and we have been moved to a new upgraded network hardware that should help reduce congestion during an attack. We've also purchased a bunch of new ipv4 that we can use to split users on Tommy into groups to help narrow down which group is being attacked. This should all result in better uptime for everyone.

If you think you are being targeted, or may be targeted in the future please contact us so we can work with you to help keep your website online, and eliminate the number of innocent accounts that are experiencing downtime because of this.

Let us know if you have any questions or comments.

  • Like 3
Link to comment
Share on other sites

  • Krydos locked this topic
This topic is now closed to further replies.

  • Create New...